Download PC-cillian_firewalls(2)

Galileo International
Technical Support Documentation
Trend Micro PC-cillian
Exception Creation List
For Focalpoint®, Viewpoint™ & Focalpoint Print Manager™
(GALILEO® and APOLLO® PRODUCTION SYSTEMS)
Copyright
Copyright © 2001 Galileo International. All rights reserved.
Information in this document is subject to change without notice. The
information described in this document is furnished to Galileo International
subscribers, or their representatives, and is provided as is under a license
agreement or nondisclosure agreement. No part of this publication may be
reproduced, stored in a retrieval system, or transmitted in any form or any
means electronic or mechanical, including photocopying and recording for
any purpose other than the subscriber’s personal use without the written
permission of Galileo International.
Trademarks
Apollo, Galileo, the Globe Device, Focalpoint Print Manager and Viewpoint
are registered trademarks, trademarks or service marks of Galileo
International in the United States and/or other countries.
Galileo International may have patents or pending patent applications,
trademarks, copyrights, or other intellectual property rights covering subject
matter in this document. The furnishing of this document does not give you
any license to these patents, trademarks, copyrights, or other intellectual
property rights except as expressly provided in any written license agreement
from Galileo.
PC-cillian exception list creation 5/13/2005
1
Introduction
This document outlines configuration changes that are required by a firewall administrator to
allow Galileo’s Focalpoint®, Viewpoint™ and Focalpoint Print Manager™ (FPM) applications
to establish a session with Galileo’s computer reservation system (CRS) hosts when using Trend
Micro’s PC-cillian Internet Security software. Galileo International provides this information as
a guide only. The term “Inbound” indicates traffic passing into the subscriber’s network from the
reservation system. The term “Outbound” indicates traffic passing out of the subscriber’s
network to the reservation system).
Configuration of Trend Micro’s PC-cillian placed between the computer(s) running Focalpoint,
Viewpoint and FPM and the Galileo® or Apollo® host system(s) is the sole responsibility of the
Galileo customer. It is strongly recommended that the subscriber or firewall administrator
contact their respective firewall providers prior to making changes to support Galileo
International products. Galileo International does not provide technical or help desk support in
these types of configurations.
PC-cillian exception list creation 5/13/2005
2
Exception List Creation
Note, you will need to create an exception list to allow UDP 4500 to pass through the firewall.
Start by accessing PC-cillian, either via the programs list under the start menu or by double
clicking Trend Micro icon in the lower right corner system tray.
Once PC-cillian is displayed, click Network Security on the left side.
PC-cillian exception list creation 5/13/2005
3
Click on the direct connection profile and click edit.
PC-cillian exception list creation 5/13/2005
4
On the Exception list, click Add.
Change the name from “new rule” to FPNETIPSEC.GALILEO.COM.
Click Specified application, than click Browse. Navigate to the Extranet_serv.exe file which is
located in c:\program files\Nortel Networks folder. Highlight the file, than click OK.
Verify that outgoing under connection and allow under action are selected.
Choose UDP under protocol and specified ports, type 4500 in the white box.
Under IP Setting, click IP address in the drop down list and type:
Fpnetipsec.galileo.com in the Host Name box and click resolve. The host name will be replaced
with the IP address of 198.151.32.105.
Verify your configuration with the example below, than click OK.
Click OK on the Personal Firewall Profile page and than Apply on the personal firewall page.
You have successfully added the required exception lists for the direct connection profile. Repeat
these steps for each profile that you may use.
PC-cillian exception list creation 5/13/2005
5